What is phishing?

Protect yourself from fraudulent emails, calls, texts, and chats. Check the Xfinity internet security alerts site often for security alerts, and top phishing scams.

Think you received a phishing scam email? If so, follow the steps in the section below.

Received a spam text? Avoid clicking any links and forward the text to 7726. See common phone scams and how to protect yourself.

What is email phishing?

Phishing is when scammers pretend to be real companies in emails. They try to get you to share private info like usernames, passwords, account information, or credit card numbers. Bad actors will often copy the look of real websites in an attempt to mislead you.

Make sure you don't fall for phishing scams

• Be suspicious of any email, chat, text, or call that asks for your personal account information, like usernames, passwords, and account numbers.
• Only enter credit card info on websites that start with https:// (the “s” means it’s secure).
• Xfinity will never ask you for password information over the phone, or through text, chat, or email.
• Xfinity will never ask for billing or payment information through email.
• Xfinity will never ask you to prepay for multiple months of service in exchange for free service, or require an uncommon payment method like gift cards.
• Legitimate payments can only be made through the official Xfinity website, app, or an authorized Xfinity store.
• Gift cards, cryptocurrency, or other nonstandard methods are never requested for payments, and discounts are not offered for using these payment methods.
• To verify if a caller, email, or text offer is valid, you can always visit xfinity.com or use Xfinity Assistant.

   

Real Xfinity Notifications

Scammers often try to make their emails and text messages look like official Xfinity messages. The best way to tell if an email or text message was sent by Xfinity is by looking at the sending address. Xfinity sends messages from the following numbers:

• 266278
• 934489
• 61591
• 41371
• 73348

Message from these numbers may be identified as “Xfinity Assistant”.

How to spot a Phishing Email or Phishing Text Message

Scammers will try to trick you into thinking the email or text message you received from them is official. Here are some things to watch out for:

• Urgent language like “Your account will be deleted” or “Immediate action required”.
• Misspelled web address or email addresses that don’t end in either “comcast.net” or “xfinity.com”.
• Requests for personal information such as your password, Social Security number, or payment details.
• Unexpected attachments or links, especially if you weren’t expecting a message from Xfinity.
• Requests for payment using gift cards. Xfinity does not request payment through gift cards.

How to stay protected

If you are not sure if you have received a scam or phishing email or text from Xfinity, you can check the Xfinity Latest Cybersecurity Alerts website for Comcast Security Alerts and Top Phishing Scams. You can also:

• Go directly to www.Xfinity.com to manage your account. Do not click on links in emails unless you’re sure they’re legitimate.
• Enable two-step verification on your Xfinity account for added security.
• Set up Multifactor Authentication in the Xfinity app.
• Use strong, unique passwords or passphrases for your email and other online accounts.
• Delete suspicious emails and text messages from your devices without opening them.
• Unsure about a call you received from Xfinity?
  • Politely inform the caller that you are going to call Xfinity at 1-800-COMCAST (1-800-266-2278) or 1-800-XFINITY (1-800-934-6489) and speak to an agent about the phone call you received. 

Think you received a phishing scam email?

Follow the steps below to start an investigation:

1. Do not click links in the suspicious email.
   • Scammers often try to scare you by saying things like, “Your services are being disconnected” or “Your account is past due.”
     
     • You can check your account anytime at xfinity.com or in the Xfinity app.
2. Click the Mark as Spam icon.
   • This helps block future scam emails and protect you by flagging suspicious messages for review.

If you would like to help protect Comcast and other customers, please follow the steps below:

1. Copy the email and its headers into a new email.
   • Headers show the sender, recipient, date, and subject.
     • Some headers like the From, To, and Date headers, are mandatory.
     • Others are optional, but very commonly used, like Subject and CC.
     • Make sure you copy all these details to your new email.
   • Do not forward the message. Copy and paste it instead.
     • Write "phishing email" in the subject line.
2. Send the email to Xfinity's abuse team at abuse@comcast.net.

Follow these guidelines

• If you responded to a fraudulent email, immediately alert your bank and/or credit card company.
• Report spam to ftc.gov/complaint.
• If you think you were scammed, file a report with the Federal Trade Commission (FTC) at ftc.gov.
• Then, visit consumer.gov/idtheft to learn how to protect yourself from identity theft.

Additional information

Visit our Online Support Center to find common solutions.

The easiest way to activate, manage, and troubleshoot your Xfinity experience is with the Xfinity app! Get 24/7 real-time support, pay your bill, view plan details, get outage updates, and more. Download the free Xfinity app, or scan the QR code with your smartphone.

Need additional support? Ask Xfinity Assistant.